Resources like taglib, cc, templates can be accessed via browser

[mkobylarz]

Hi,

Internal application resources like taglib.xml, facelet templates, composite component source files can be simply accessed via browser for example (as per joinfaces-maven-jar-example):
http://localhost:8080/tags/tags.taglib.xml
http://localhost:8080/cc/textComponent.xhtml

Is there any solution in joinfaces to exclude them from serving by container or move to some location outside of public access scope?

[raffig]

Hey there JoinFaces! Could you please refer to this issue? It seems to be potential security issue. Is there any solution, like paramater for setting location of JSF source files?